04/22/2022, 3:53 AM
is the augeas lens for json files not expected to work, and therefore kolide made their own extension/table for it? This is the weird area where osquery in theory doesn't want to infringe on privacy by being an all-purpose exfil/file reading util, but… just like how carving is behind a flag it seems like if augeas has the lens it should Just Work™, no?